Last Updated: October 2, 2026

At Trek Sumatra Orangutan, operated by Sumatra Stone Stories, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit treksumatraorangutan.com, contact us, submit a booking or inquiry, or use our trekking, transportation, and related travel services.

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

Business/Operator: Sumatra Stone Stories
Website: treksumatraorangutan.com
Email: sumatrastonestories@gmail.com
WhatsApp: +62 8137 6805303
Location: Bukit Lawang, Bahorok, Langkat, North Sumatra, Indonesia.

For questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. Information We Collect

When you contact us, request information, submit an inquiry, or make a booking through our website, we may collect information such as:

– Full name
– Email address
– WhatsApp or telephone number
– Number of participants
– Preferred trekking date
– Selected trekking package or duration
– Accommodation information
– Pickup or drop-off information
– Airport or transportation information when transportation is requested
– Payment status or transaction reference where applicable
– Special requests or information voluntarily provided by you
– Information contained in messages or other communications you send to us

We only request information that is reasonably necessary to provide our services, manage your booking, communicate with you, and organize requested transportation or other travel arrangements.

3. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically by the website, hosting provider, or third-party services that are actually active on the website.

Depending on the website configuration, this may include:

– IP address
– Browser type
– Device information
– Operating system
– Pages visited
– Date and time of your visit
– Referring website
– General website usage information

This information may be used to maintain website security, understand website usage, improve website performance, and improve our services.

The specific information collected may depend on the cookies, analytics tools, plugins, hosting services, and other technologies currently installed and active on the website.

4. Legal Basis for Processing Personal Information

Where required by applicable law, we process personal information on an appropriate legal basis.

Depending on the circumstances, this may include:

– Performance of a contract or requested service: for processing and managing trekking bookings, transportation, and other services you request.
– Steps taken before entering into a contract: for responding to inquiries and preparing requested arrangements.
– Consent: where you voluntarily provide consent for a specific processing activity where consent is required.
– Legal obligations: where processing is necessary to comply with applicable legal, accounting, tax, or administrative requirements.
– Legitimate interests: where permitted by applicable law, such as maintaining website security, preventing misuse, managing business records, and improving our services.

Where processing is based on consent, you may withdraw your consent where permitted by applicable law.

5. How We Use Your Information

We may use your personal information to:

– Process and manage trekking bookings
– Confirm your booking and trekking arrangements
– Contact you regarding your booking
– Communicate with you through email, WhatsApp, telephone, or other direct communication channels
– Arrange guides, transportation, pickup, or other services you request
– Confirm accommodation or meeting arrangements where necessary
– Process or confirm payments and deposits
– Respond to questions and inquiries
– Provide information about our services
– Improve our website and customer experience
– Maintain website security and prevent misuse
– Maintain appropriate business records
– Comply with applicable legal and administrative obligations
– Resolve disputes or protect our legitimate business interests where permitted by law

We do not intentionally use your personal information for purposes unrelated to the services we provide unless permitted by law or you have otherwise agreed.

6. WhatsApp and Direct Communication

Because our trekking services are locally operated, we may communicate with customers through WhatsApp, telephone, email, or other direct communication channels.

If you provide your WhatsApp number or telephone number, we may use it to:

– Confirm your booking
– Provide pickup and meeting information
– Communicate changes to your itinerary
– Coordinate transportation
– Answer questions related to your trekking
– Provide important information before or during your trip

We will not intentionally use your contact information for unrelated marketing communications without an appropriate legal basis or your consent where required.

Please note that WhatsApp and other third-party communication services may process information according to their own privacy policies and terms.

7. Booking Information

Information submitted through our booking or inquiry forms is used to process and manage your trekking request.

Depending on the service you select, we may need information about:

– Trekking date
– Number of guests
– Selected trekking package
– Transportation requirements
– Pickup or drop-off location
– Accommodation information
– Contact details
– Other information reasonably necessary to organize your trip

Information submitted through our website may be transmitted to our business email, booking system, website administrator, or relevant service providers for the purpose of processing your request.

We may share necessary booking information with our guides, drivers, accommodation partners, or other service providers involved in fulfilling your booking, but only to the extent reasonably necessary to provide the requested service.

8. Payments and Deposits

Depending on the service, payment or deposit may be made through bank transfer, Wise, or another payment method made available to you.

Payment-related information may include payment status, transaction reference, payment confirmation, or other information reasonably necessary to verify your payment.

Where payment is processed through a third-party payment provider, that provider may process your payment information according to its own privacy policy and terms.

We do not intentionally store complete credit or debit card numbers on our website unless our payment system specifically requires and securely supports such processing.

9. Third-Party Services

Our website may use third-party services to provide website functionality, hosting, analytics, communication, booking, payment, security, or other services.

Depending on which services are actually active on the website, these may include:

– Website hosting and technical service providers
– Analytics services
– Communication services such as WhatsApp
– Payment providers
– Booking or form services
– Social media or review services
– Other technology providers necessary to operate the website

Third-party services may process information according to their own privacy policies and terms.

We aim to provide third parties only with information that is reasonably necessary for the relevant service.

The specific third-party services used by the website may change over time as we update or improve our website.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help websites remember preferences, maintain functionality, understand website usage, and improve the user experience.

Cookies may be used for purposes such as:

– Essential website functionality
– Website security
– Remembering preferences
– Website analytics
– Understanding website usage
– Improving website performance

Some third-party services integrated into the website may also use cookies or similar technologies.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect some website functionality.

The types of cookies used may change depending on the technologies and services active on the website.

11. Analytics and Website Improvement

We may use analytics tools to understand how visitors use our website.

Analytics information may help us understand:

– Which pages visitors view
– How visitors navigate the website
– General website usage patterns
– Website performance
– How we can improve our content and services

Where third-party analytics services are used, those services may process information according to their own privacy policies.

We will only identify specific analytics providers in this Privacy Policy where those services are actually installed or active on the website.

12. Sharing of Personal Information

We do not sell or rent your personal information to third parties.

We may share limited personal information when reasonably necessary with:

– Local trekking guides
– Drivers or transportation providers
– Accommodation or service partners involved in your booking
– Payment providers
– Website hosting or technical service providers
– Booking or form service providers
– Analytics or website service providers
– Government authorities or other parties where required by applicable law

We aim to share only information that is reasonably necessary for the relevant purpose.

For example, a driver may receive your name, contact details, pickup location, accommodation information, and relevant travel information when necessary to provide requested transportation.

13. International Data Transfers

Some third-party technology, communication, hosting, payment, or other service providers may process information on servers located outside Indonesia.

Where personal information is transferred or processed internationally, we take reasonable steps to use appropriate service providers and protect personal information in accordance with applicable laws.

Third-party providers may have their own privacy policies and safeguards governing international data transfers.

14. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet transmission, website, or electronic storage system can be guaranteed to be completely secure.

For this reason, while we take reasonable steps to protect your information, we cannot guarantee absolute security of information transmitted through the internet.

15. Personal Data Breach

If we become aware of a personal data breach affecting personal information under our control, we will take reasonable steps to investigate, contain, and address the incident.

Where notification is required by applicable law, we will provide the required notifications to the relevant authorities and/or affected individuals within the timeframe and in the manner required by law.

16. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

– Processing and managing bookings
– Providing customer service
– Maintaining business, accounting, and payment records
– Resolving disputes
– Meeting legal, tax, accounting, or administrative requirements
– Protecting our legitimate business interests
– Maintaining website security and preventing misuse

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal requirements.

17. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information, including the right to:

– Request access to personal information we hold about you
– Request correction of inaccurate or incomplete information
– Request deletion of personal information where legally applicable
– Request information about how your personal information is processed
– Withdraw consent where processing is based on consent
– Object to certain processing where applicable
– Request restriction of certain processing where applicable

To exercise a privacy-related right, please contact us using the contact details provided in this Privacy Policy.

We may need to verify your identity before processing certain requests in order to protect your personal information.

Some rights may be subject to legal limitations or exceptions.

18. Children’s Privacy

Our website and trekking services are primarily intended for travelers and customers who can lawfully enter into arrangements for travel services.

We do not knowingly collect unnecessary personal information from children.

Where information about a child is required for a booking, it should be provided by a parent, legal guardian, or another person legally authorized to provide that information.

19. Links to Other Websites

Our website may contain links to third-party websites, including booking platforms, social media websites, travel platforms, payment services, review platforms, or other external websites.

We are not responsible for the privacy practices, content, or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology, third-party services, or applicable legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this page.

We encourage visitors to review this Privacy Policy periodically.

21. Contact Us

If you have questions about this Privacy Policy, want to request access to or correction of your personal information, or have any privacy-related concerns, please contact us:

Sumatra Stone Stories
Website: treksumatraorangutan.com
Email: sumatrastonestories@gmail.com
WhatsApp: +62 8137 6805303
Location: Bukit Lawang, Bahorok, Langkat, North Sumatra, Indonesia

We will make reasonable efforts to respond to privacy-related requests in accordance with applicable law.